Artificial intelligence digital science and technology platform based on big data analysis

Abstract

The invention discloses an artificial intelligence digital science and technology platform based on big data analysis, and relates to the technical field of data security early warning. The IP address acquisition and range determination module is used for acquiring a first IP address of a user and acquiring a first range value according to the first IP address, and the user presets default operation in the first range value. Data security early warning behaviors are corrected, data transmission can be limited after long-distance login, limitation can be removed under the condition that multiple authentication is met, meanwhile, long-distance login can be memorized according to the IP address, the tedious process of repeated authentication is avoided, and through cooperation with preprocessing setting of the IP address, the safety of the IP address is improved. The problem that the security of remote login data is difficult to guarantee can be well avoided, remote operation can be prevented in advance, and the tedious process caused by subsequent remote operation is avoided.

Description

Technical Field

[0001] The present invention relates to the field of data security early warning technology, and specifically to an artificial intelligence digital technology platform based on big data analysis. Background Art

[0002] In today's digital wave, all kinds of data are growing exponentially and flowing frequently between different systems, network environments and geographical regions. Enterprises and organizations face unprecedented security challenges in the process of data processing. The traditional data security assurance system has become incapable of coping with complex data interaction scenarios. Take remote data operations as an example. The existing methods focus on simple remote login verification methods, such as common user name and password combined with SMS verification code or dynamic token. Although these measures can ensure data security and provide encryption protection to a certain extent, there are many inconveniences and defects in actual business scenarios.

[0003] For technicians who often travel to other places for work, due to the frequent changes in work locations, they need to periodically log in from other places, which forces them to frequently go through cumbersome authentication processes. Moreover, in different regional network environments, even if there are some regional network IP addresses that overlap, due to factors such as the network service provider's allocation strategy or network switching, the IP addresses often change, and such changes will also trigger multiple identity authentication requirements. This makes data security warnings inefficient.

[0004] To this end, the present invention proposes an artificial intelligence digital technology platform based on big data analysis to solve the above-mentioned problems. Summary of the invention

[0005] 1. Technical issues to be solved

[0006] In view of the shortcomings of the prior art, the present invention provides an artificial intelligence digital technology platform based on big data analysis, which solves the problems mentioned in the above background technology.

[0007] (II) Technical solution

[0008] To achieve the above objectives, the present invention is implemented through the following technical solutions: an artificial intelligence digital technology platform based on big data analysis, comprising:

[0009] An IP address acquisition and range determination module, which acquires a first IP address of a user, and acquires a first range value according to the first IP address, wherein the user presets a default operation within the first range value, wherein the first range value is a regional range corresponding to a geographical location of the first IP address;

[0010] The specific method of preset default operation is: after authenticating the first IP address within the first range value, there is no data security warning prompt for the second and above operations;

[0011] A range comparison and warning module obtains a second IP address of the user, obtains a second range value according to the second IP address, and then compares the second range value with the first range value to issue a data security warning for remote operation behavior, wherein the second range value is the regional range of the geographical location corresponding to the second IP address;

[0012] The warning correction module corrects the data security warning behavior according to the change of the second range value of the second IP address, specifically, establishes a preprocessing mechanism for data security warning, takes basic information as input instructions, and corresponds to the regional range of different geographical locations, wherein the basic information is specifically the region name.

[0013] As an improved technical solution, in the IP address acquisition and range determination module and the range comparison and warning module, the specific method for acquiring the first range value and the second range value is:

[0014] S1: First, the network service provider allocates different IP addresses according to geographical locations and marks them as Cj. At this time, the area range value corresponding to Cj is automatically generated and marked as Sj. The size of the area range value is set by the network service provider;

[0015] S2: Then in the Internet architecture, the IP address obtained for the first time is marked as the first IP address, denoted as C1, C1 corresponds to the first range value S1, and the IP address obtained for the second time and above is marked as the second IP address, denoted as C2, C3, ...Cj respectively, C2, C3, ...Cj correspond to the second range values ​​S2, S3, ...Sj.

[0016] As an improved technical solution, when the area range value Sj corresponding to Cj in S1 is automatically generated, the area between S1-Sj may partially overlap or not overlap at all.

[0017] As an improved technical solution, the specific method of comparing the second range value with the first range value in the range comparison and warning module and providing a data security warning for remote operation behavior is as follows:

[0018] P1: First, the authentication level is divided into basic information authentication and multi-factor authentication. Based on the acquisition of C1, C2, C3, ... Cj, it is judged that the operation is in a remote location. At this time, a security warning prompt is issued, specifically a pop-up window reminder and data transmission restriction. Then multi-factor authentication is required. After the authentication is completed, the data transmission restriction is lifted;

[0019] P2: Then mark the specific Sj range according to the location of the remote operation. When the Sj range is operated twice or more, the pop-up reminder will be lifted. Only basic information authentication is required to lift the data transmission restriction.

[0020] As an improved technical solution, the P1 determines that when the remote operation is in progress based on the acquisition of C1 and C2, C3, ...Cj, when there is a partially overlapping area, the same IP address will change, and further analysis is required at this time:

[0021] P11: Locate the IP address with an accuracy of 1-2m, mark the point as OA, and then generate a circular area range SR with R as the radius. At this time, within the range SR, when the same IP address changes, there is no need to issue a data security warning.

[0022] As an improved technical solution, a preprocessing mechanism for data security warning is established in the warning correction module, with basic information as input instructions. The specific method corresponding to the regional scope of different geographical locations is as follows:

[0023] M1: First, combine the region name with the IP address so that one region name corresponds to one IP address. Then, establish an associated search engine. Enter the region name in the associated search engine, and the corresponding IP address will be directly displayed.

[0024] M2: Then click on the IP address and set the add option after entering the IP address. After confirming the addition, there is no need to issue a data security warning when the IP address is obtained for the first time. The number of IP addresses added is one or several.

[0025] As an improved technical solution, in M2, an add option is set after entering the IP address, and when the entered regional name is a superior regional name, all IP addresses of the subordinate regional names are displayed.

[0026] (III) Beneficial effects

[0027] The present invention provides an artificial intelligence digital technology platform based on big data analysis. Compared with the prior art, it has the following beneficial effects:

[0028] This artificial intelligence digital technology platform based on big data analysis can limit data transmission after logging in from a different location by issuing data security warnings for remote operations and correcting the data security warning behaviors. It can also lift the restrictions when multiple authentications are met. At the same time, it can also remember remote logins based on IP addresses to avoid the tedious process of repeated authentication. The IP address preprocessing settings based on big data can properly solve the problem of data security being difficult to ensure when logging in from a different location. It can also predict possible remote operation risks in advance and proactively deploy preventive strategies, thereby greatly improving the efficiency and accuracy of data security protection, reducing the risks of business interruptions and information leakage caused by data security incidents, and providing all-round, intelligent security protection for the data assets of enterprises and organizations, strongly supporting the stable and efficient operation of their digital businesses. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 It is the principle diagram of the data security early warning system of the present invention;

[0030] Figure 2 This is a schematic diagram of the structure of an electronic device shown in an embodiment of the present application. DETAILED DESCRIPTION

[0031] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0032] See also Figure 1-Figure 2 , the embodiment of the present invention provides three technical solutions:

[0033] Embodiment 1

[0034] An artificial intelligence digital technology platform based on big data analysis, including:

[0035] An IP address acquisition and range determination module acquires a user's first IP address, acquires a first range value according to the first IP address, and the user presets a default operation within the first range value, wherein the first range value is a regional range corresponding to the geographical location of the first IP address; wherein the specific method of presetting the default operation is: after authenticating the first IP address within the first range value, there is no data security warning prompt for the second or more operations;

[0036] The range comparison and warning module obtains the second IP address of the user, obtains the second range value according to the second IP address, and then compares the second range value with the first range value to issue a data security warning for remote operation behavior, wherein the second range value is the regional range of the geographical location corresponding to the second IP address;

[0037] In the IP address acquisition and range determination module and the range comparison and warning module, the specific method for acquiring the first range value and the second range value is as follows: S1: First, the network service provider allocates different IP addresses according to the geographical location and marks them as Cj. At this time, the regional range value corresponding to Cj is automatically generated and marked as Sj, wherein the size of the regional range value is set by the network service provider; when the regional range value Sj corresponding to Cj in S1 is automatically generated, there is partial overlap or no overlap between the areas S1-Sj; S2: Then in the Internet architecture, the IP address obtained for the first time is marked as the first IP address, denoted as C1, C1 corresponds to the first range value S1, and the IP address obtained for the second time and above is marked as the second IP address, denoted as C2, C3, ...Cj in sequence, and C2, C3, ...Cj correspond to the second range values ​​S2, S3, ...Sj.

[0038] Combined with actual analysis, for example, the IP address Cj of this machine is 117.136.12.133, and the corresponding area range value Sj is Foshan City, Guangdong Province, China. When the IP address changes, that is, when the second IP address is 120.198.236.40, the corresponding area range value Sj is Shenzhen City, Guangdong Province, China.

[0039] The second range value in the range comparison and warning module is compared with the first range value. The specific method of data security warning for remote operation behavior is as follows: P1: First, the authentication level is divided, which is specifically divided into basic information authentication and multiple identity authentication. Basic information authentication is a simple ID card number corresponding to a mobile phone number. Multiple identity authentication requires adding SMS verification code, voice recognition, facial recognition, etc. on the basis of basic information authentication. According to the acquisition of C1 and C2, C3,...Cj, it is judged that the operation is in a remote location. At this time, a security warning prompt is issued, specifically a pop-up reminder and data transmission restriction, and then multiple identity authentication is required. After the verification is completed, the data transmission restriction is lifted; in P1, according to the acquisition of C1 and C2, C3,...Cj, when it is judged that the operation is in a remote location, when there is a partially overlapping area, the same IP address will change, and further analysis is required at this time: P11: The IP address is located with an accuracy of 1-2m, and the point is marked as OA, and then a circular area range of SR is generated with R as the radius. At this time, within the range SR, when the same IP address changes, there is no need for data security warning. P2: Then mark the specific Sj range according to the location of the remote operation. When the Sj range is operated twice or more, the pop-up reminder will be lifted. Only basic information authentication is required to lift the data transmission restriction.

[0040] Combined with actual analysis, taking IP address Cj of 117.136.12.133 and IP address Cj of 120.198.236.40 as examples, at this time, it is judged that the operation is in a different place according to the different IP addresses, and a pop-up window pops up to remind the words "off-site risk operation", and then data transmission cannot be carried out. At this time, multiple identity authentication is performed, and the data transmission restriction is lifted after the verification is completed. When there are partially overlapping areas, the OA specific map is used for positioning, R is 50m, and a circular area of ​​2500π㎡ is formed. When the same IP address changes within the 2500π㎡ range with OA as the origin, the pop-up window will not prompt. When the secondary operation is still the IP address Cj of 120.198.236.40, basic information authentication is required to lift the data transmission restriction.

[0041] The warning correction module corrects the data security warning behavior according to the change of the second range value of the second IP address, specifically, establishes a preprocessing mechanism for data security warning, takes basic information as input instructions, and corresponds to the regional range of different geographical locations, wherein the basic information is specifically the region name.

[0042] In the early warning correction module, a preprocessing mechanism for data security early warning is established, with basic information as input instructions. The specific method corresponding to the regional scope of different geographical locations is as follows: M1: First, the regional name and the IP address are combined so that one regional name corresponds to one IP address, and then an associated search engine is established. The regional name is entered in the associated search engine, and the corresponding IP address will be directly displayed at this time; M2: Then click on the IP address, and set the add option after entering the IP address. After confirming the addition, after the IP address is first obtained, there is no need to issue a data security early warning, where the number of IP addresses added is one or more. In M2, the add option is set after entering the IP address. When the entered regional name is the upper-level regional name, all IP addresses of the lower-level regional name are displayed at this time.

[0043] Combined with actual analysis, taking the IP address 117.136.12.133, the corresponding area range is Foshan City, Guangdong Province, China, and the IP address 120.198.236.40, the corresponding area range is Shenzhen City, Guangdong Province, China as an example, in the associated search engine, you only need to enter Foshan City, Guangdong Province, China, and the IP address 117.136.12.133 will pop up, enter Shenzhen City, Guangdong Province, China, and the IP address 120.198.236.40 will pop up. When entering Guangdong Province, China, the IP addresses of Foshan City, Shenzhen City and all prefecture-level cities in Guangdong Province are all displayed. After confirming the addition, the pop-up window will not prompt when the IP address is obtained for the first time.

[0044] Embodiment 2

[0045] This embodiment is based on the first embodiment, and differs from the first embodiment in that it further includes:

[0046] The warning value setting and data screening module divides the warning threshold according to the user's data, selects the data security warning according to the warning threshold, and issues data security warning based on the selected data part, where the warning threshold is within the range set by the user.

[0047] The specific method of selecting data security warning according to the warning threshold is: marking the user's data as Dj, and grading it according to the importance of Dj, dividing it into Class I data ADj and Class II data BDj, wherein Class I data ADj needs to perform data security warning according to the execution standard of the first embodiment, and Class II data BDj does not need data security warning after remote login of the IP address, and data transmission can be performed in the form of basic information authentication.

[0048] Embodiment 3

[0049] An artificial intelligence digital technology platform based on big data analysis, including:

[0050] An IP address acquisition and range determination module, which acquires a first IP address of a user, acquires a first range value according to the first IP address, and a user presets a default operation within the first range value, wherein the first range value is a regional range corresponding to a geographical location of the first IP address;

[0051] The specific method of preset default operation is: after authenticating the first IP address within the first range value, there is no data security warning prompt for the second and above operations;

[0052] The range comparison and warning module obtains the second IP address of the user, obtains the second range value according to the second IP address, and then compares the second range value with the first range value to issue a data security warning for remote operation behavior, wherein the second range value is the regional range of the geographical location corresponding to the second IP address;

[0053] The warning correction module corrects the data security warning behavior according to the change of the second range value of the second IP address, specifically, establishes a preprocessing mechanism for data security warning, takes basic information as an input instruction, and corresponds to the regional range of different geographical locations, wherein the basic information is specifically the name of the region;

[0054] The warning value setting and data screening module divides the warning threshold according to the user's data, selects the data security warning according to the warning threshold, and issues data security warning based on the selected data part, where the warning threshold is within the range set by the user.

[0055] Meanwhile, the contents not described in detail in this specification belong to the prior art known to those skilled in the art.

[0056] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0057] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

[0058] Corresponding to the aforementioned application function implementation method embodiment, the present application also provides an electronic device and corresponding embodiments.

[0059] See also Figure 2 , the electronic device 1000 includes a memory 1010 and a processor 1020 .

[0060] The processor 1020 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc.

[0061] The memory 1010 may include various types of storage units, such as system memory, read-only memory (ROM), and permanent storage devices. Among them, ROM can store static data or instructions required by the processor 1020 or other modules of the computer. The permanent storage device may be a readable and writable storage device. The permanent storage device may be a non-volatile storage device that does not lose the stored instructions and data even after the computer is powered off. In some embodiments, the permanent storage device uses a large-capacity storage device (such as a magnetic or optical disk, flash memory) as a permanent storage device. In some other embodiments, the permanent storage device may be a removable storage device (such as a floppy disk, optical drive). The system memory may be a readable and writable storage device or a volatile readable and writable storage device, such as a dynamic random access memory. The system memory may store some or all instructions and data required by the processor at run time. In addition, the memory 1010 may include any combination of computer-readable storage media, including various types of semiconductor memory chips (DRAM, SRAM, SDRAM, flash memory, programmable read-only memory), and disks and / or optical disks may also be used. In some embodiments, the memory 1010 may include a readable and / or writable removable storage device, such as a laser disc (CD), a read-only digital versatile disc (such as a DVD-ROM, a double-layer DVD-ROM), a read-only Blu-ray disc, an ultra-density optical disc, a flash memory card (such as an SD card, a mini SD card, a Micro-SD card, etc.), a magnetic floppy disk, etc. The computer-readable storage medium does not include carrier waves and transient electronic signals transmitted wirelessly or wired.

[0062] The memory 1010 stores executable codes, and when the executable codes are processed by the processor 1020 , the processor 1020 can execute part or all of the modules mentioned above.

[0063] The scheme of the present application has been described in detail above with reference to the accompanying drawings. In the above embodiments, the descriptions of each embodiment have their own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments. Those skilled in the art should also be aware that the actions and modules involved in the description are not necessarily required by the present application. The modules in the device of the embodiment of the present application can be merged, divided and deleted according to actual needs.

[0064] In addition, the module according to the present application can also be implemented as a computer program or a computer program product, which includes computer program code instructions for executing part or all of the steps in the above-mentioned platform of the present application.

[0065] Alternatively, the present application can also be implemented as a non-temporary machine-readable storage medium (or computer-readable storage medium, or machine-readable storage medium) on which executable code (or computer program, or computer instruction code) is stored. When the executable code (or computer program, or computer instruction code) is executed by a processor of an electronic device (or electronic device, server, etc.), the processor executes part or all of the above-mentioned modules according to the present application.

[0066] Those skilled in the art will further appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the application herein may be implemented as electronic hardware, computer software, or combinations of both.

[0067] The flow chart and block diagram in the accompanying drawings show the possible architecture, function and operation of the system according to multiple embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a part of a module, a program segment or a code, and the part of the module, the program segment or the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two continuous square boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or the flow chart, and the combination of the square boxes in the block diagram and / or the flow chart can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of special hardware and computer instructions.

[0068] The embodiments of the present application have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. An artificial intelligence digital technology platform based on big data analysis, characterized in that: include: An IP address acquisition and range determination module, which acquires a first IP address of a user, and acquires a first range value according to the first IP address, wherein the user presets a default operation within the first range value, wherein the first range value is an area range corresponding to a geographical location of the first IP address; The specific method of preset default operation is: after authenticating the first IP address within the first range value, there is no data security warning prompt for the second and above operations; A range comparison and warning module obtains a second IP address of the user, obtains a second range value according to the second IP address, and then compares the second range value with the first range value to issue a data security warning for remote operation behavior, wherein the second range value is the regional range of the geographical location corresponding to the second IP address; The warning correction module corrects the data security warning behavior according to the change of the second range value of the second IP address, specifically, establishes a preprocessing mechanism for data security warning, takes basic information as input instructions, and corresponds to the regional range of different geographical locations, wherein the basic information is specifically the region name.

2. The artificial intelligence digital technology platform based on big data analysis according to claim 1 is characterized by: In the IP address acquisition and range determination module and the range comparison and warning module, the specific method for acquiring the first range value and the second range value is: S1: First, the network service provider allocates different IP addresses according to geographical locations and marks them as Cj. At this time, the area range value corresponding to Cj is automatically generated and marked as Sj. The size of the area range value is set by the network service provider; S2: Then in the Internet architecture, the IP address obtained for the first time is marked as the first IP address, denoted as C1, C1 corresponds to the first range value S1, and the IP address obtained for the second time and above is marked as the second IP address, denoted as C2, C3, ...Cj respectively, C2, C3, ...Cj correspond to the second range values ​​S2, S3, ...Sj.

3. The artificial intelligence digital technology platform based on big data analysis according to claim 2 is characterized by: When the area range value Sj corresponding to Cj in S1 is automatically generated, the area between S1-Sj may partially overlap or not overlap at all.

4. An artificial intelligence digital technology platform based on big data analysis according to claim 2 or 3, characterized in that: The specific method of comparing the second range value with the first range value in the range comparison and warning module and issuing a data security warning for the remote operation behavior is: P1: First, the authentication level is divided into basic information authentication and multi-factor authentication. Based on the acquisition of C1, C2, C3, ... Cj, it is judged that the operation is in a remote location. At this time, a security warning prompt is issued, specifically a pop-up window reminder and data transmission restriction. Then multi-factor authentication is required. After the authentication is completed, the data transmission restriction is lifted; P2: Then mark the specific Sj range according to the location of the remote operation. When the Sj range is operated twice or more, the pop-up reminder will be lifted. Only basic information authentication is required to lift the data transmission restriction.

5. The artificial intelligence digital technology platform based on big data analysis according to claim 4 is characterized by: In the P1, based on the acquisition of C1 and C2, C3, ...Cj, it is determined that when the remote operation is in progress, when there is a partially overlapping area, the same IP address will change, and further analysis is required at this time: P11: Locate the IP address with an accuracy of 1-2m, mark the point as OA, and then generate a circular area range SR with R as the radius. At this time, within the range SR, when the same IP address changes, there is no need to issue a data security warning.

6. The artificial intelligence digital technology platform based on big data analysis according to claim 1 is characterized by: The preprocessing mechanism of data security warning is established in the warning correction module, with basic information as input instructions, and the specific method corresponding to the regional scope of different geographical locations is as follows: M1: First, combine the region name with the IP address so that one region name corresponds to one IP address. Then, establish an associated search engine. Enter the region name in the associated search engine, and the corresponding IP address will be directly displayed. M2: Then click on the IP address and set the add option after entering the IP address. After confirming the addition, there is no need to issue a data security warning when the IP address is obtained for the first time. The number of IP addresses added is one or several.

7. The artificial intelligence digital technology platform based on big data analysis according to claim 6 is characterized by: In the M2, after entering the IP address, an add option is set. When the entered regional name is a superior regional name, all IP addresses of the subordinate regional names are displayed.

Images